Defenders may be able to outstrip attackers, but doing so will require major changes to organizational practices and collective support and resourcing for critical infrastructure.

“both the fundamentals that they've gotten right which is kind of one-time investment but also the level of cyber capability they've used to defend themselves and as we shift to that world I think that we can be in a world where defenders are able to outstrip attackers but it is going to take a lot of of change right it's going to take a sort of change in terms of how we think about every organization operating and how we collectively think about critical infrastructure and resourcing them”

“those that have sort of not had those resources to date.”